Merge branch '4.1.x'

Closes gh-51436
This commit is contained in:
Moritz Halbritter
2026-08-25 09:20:30 +02:00
@@ -67,10 +67,11 @@ javadoc:org.springframework.boot.security.autoconfigure.ReactiveUserDetailsServi
To completely switch off the default web application security configuration, including Actuator security, add a bean of type javadoc:org.springframework.security.web.server.WebFilterChainProxy[] (doing so does not disable the javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] configuration).
To also switch off the javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] configuration, add a bean of type javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] or javadoc:org.springframework.security.authentication.ReactiveAuthenticationManager[].
The auto-configuration will also back off when any of the following Spring Security modules is on the classpath:
The auto-configuration of a javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] will also back off when any of the following Spring Security modules is on the classpath:
- `spring-security-oauth2-client`
- `spring-security-oauth2-resource-server`
- `spring-security-saml2-service-provider`
To use javadoc:org.springframework.security.core.userdetails.ReactiveUserDetailsService[] in addition to one or more of these dependencies, define your own javadoc:org.springframework.security.core.userdetails.MapReactiveUserDetailsService[] bean.